StarSlay3r Posted May 6, 2021 Share Posted May 6, 2021 We discovered unauthorized accesses to a small number of customer KSP webstore accounts using valid login credentials. In a subset of these accounts, the unauthorized parties were able to successfully redeem Steam key redemption codes for KSP webstore-purchased games. The Steam key functionality was available only to a select number of “early adopter” account holders who had previously purchased KSP as direct download entitlement before it was released on Steam. We have no indication of a compromise of Take-Two, Private Division’s, or Kerbal Space Program’s systems, so we believe that the usernames and passwords to the KSP webstore accounts which were likely obtained elsewhere, such as from another website where individuals used the same credentials. We have taken action to block any further unauthorized access to the KSP webstore accounts and have implemented a forced password reset for all affected KSP webstore accounts. In an abundance of caution, we have additionally implemented a forced password change for all KSP webstore accounts. This does not mean that your account was accessed by unauthorized parties. Where a Steam key was redeemed, we have revoked the prior Steam key and are restoring the KSP webstore account to its original state, with access to the direct download version. We thank you for your patience during the time the KSP webstore accounts were taken down. If you have any further questions, please email support@kerbalspaceprogram.com. Link to comment Share on other sites More sharing options...
Spaceman.Spiff Posted May 6, 2021 Share Posted May 6, 2021 Yay! but are the jeb plushies there Link to comment Share on other sites More sharing options...
DVQuill Posted May 6, 2021 Share Posted May 6, 2021 On 5/6/2021 at 4:05 PM, Spaceman.Spiff said: but are the jeb plushies there Expand Asking the real questions!!! Link to comment Share on other sites More sharing options...
Alexonaut Posted May 6, 2021 Share Posted May 6, 2021 I know a lot of people were a bit annoyed by the downtime, but I wanted to thank you guys for protecting our data! Y'all are the best for working to resolve these rough issues. Link to comment Share on other sites More sharing options...
razark Posted May 6, 2021 Share Posted May 6, 2021 Thank you for letting us know what happened, and that the situation has been resolved. Link to comment Share on other sites More sharing options...
darkeye22 Posted May 6, 2021 Share Posted May 6, 2021 I'm glad to hear that the security issues have been resolved. Thank you for letting us know what happened and not leaving us in the dark! Link to comment Share on other sites More sharing options...
Dr. Kerbal Posted May 6, 2021 Share Posted May 6, 2021 (edited) Yay! Im hyped about 1.12.0 Edited May 14, 2021 by Dr. Kerbal Link to comment Share on other sites More sharing options...
Spaceman.Spiff Posted May 6, 2021 Share Posted May 6, 2021 On 5/6/2021 at 4:04 PM, KSPStar said: We discovered unauthorized accesses to a small number of customer KSP webstore accounts using valid login credentials. In a subset of these accounts Expand Maybe you’re not allowed to disclose, but is this in any way related to the deletion of @The Doodling Astronaut’s account? Link to comment Share on other sites More sharing options...
Guest Posted May 6, 2021 Share Posted May 6, 2021 On 5/6/2021 at 7:46 PM, Spaceman.Spiff said: Maybe you’re not allowed to disclose, but is this in any way related to the deletion of @The Doodling Astronaut’s account? Expand I just to reading this article, this is talking about ksp webstore. I don’t think they are both related. Probably not a great idea to speculate Link to comment Share on other sites More sharing options...
Dman979 Posted May 6, 2021 Share Posted May 6, 2021 On 5/6/2021 at 7:46 PM, Spaceman.Spiff said: Maybe you’re not allowed to disclose, but is this in any way related to the deletion of @The Doodling Astronaut’s account? Expand I don't think you're going to get an answer for this question. I doubt they'd be willing to delve into specifics, and there's privacy concerns too. On 5/6/2021 at 9:21 PM, The Doodling Astronaut said: Probably not a great idea to speculate Expand ^This. Link to comment Share on other sites More sharing options...
obi_juan Posted May 6, 2021 Share Posted May 6, 2021 Thanks, I wanted to play this game few weeks ago and the account was unavailable... I bought a direct download in 2013. I will play this weekend... I love this game. Link to comment Share on other sites More sharing options...
Dr. Kerbal Posted May 7, 2021 Share Posted May 7, 2021 On 5/6/2021 at 9:54 PM, obi_juan said: Thanks, I wanted to play this game few weeks ago and the account was unavailable... I bought a direct download in 2013. I will play this weekend... I love this game. Expand Link to comment Share on other sites More sharing options...
ColdJ Posted May 7, 2021 Share Posted May 7, 2021 Ahh that explains why I had to put in a new password when I went to upgrade to 1.10.1 Nice to know I wasn't losing my memory. Link to comment Share on other sites More sharing options...
Eggman360 Posted May 7, 2021 Share Posted May 7, 2021 Fantasitic, and as it is a security issue it makes total sense that they didn't anounce it, potentially advertising the weakness or vulnerablility (or in this case people reusing passwords across sites). Have those who's accounts were accessed been informed? It could be useful to them to know thier passwords, email address or computer may be compromised. Really happy to have this back up and running. Thanks everyone involved! Link to comment Share on other sites More sharing options...
MechBFP Posted May 7, 2021 Share Posted May 7, 2021 (edited) Bit of free advice, if you aren't already doing so use a password manager and a unique random character & random length password for each account. Just make sure to write down the password manager password and keep it somewhere safe. Edited May 7, 2021 by MechBFP Link to comment Share on other sites More sharing options...
Just a random person Posted May 7, 2021 Share Posted May 7, 2021 (edited) Now i can't log in. I reset the password, gave a new one, and now whenever i try to login with the new password it says that it is incorrect. What do i do now? Edited May 7, 2021 by Just a random person Turns out that "-" doesn't count as a special character Link to comment Share on other sites More sharing options...
atliax Posted May 7, 2021 Share Posted May 7, 2021 On 5/7/2021 at 2:33 PM, Just a random person said: Now i can't log in. I reset the password, gave a new one, and now whenever i try to login with the new password it says that it is incorrect. What do i do now? Expand Contact them at support@kerbalspaceprogram.com Link to comment Share on other sites More sharing options...
Just a random person Posted May 7, 2021 Share Posted May 7, 2021 On 5/7/2021 at 2:41 PM, atliax said: Contact them at support@kerbalspaceprogram.com Expand No need, it's resolved already. Turns out that "-" doesn't count as a special character Link to comment Share on other sites More sharing options...
MechBFP Posted May 7, 2021 Share Posted May 7, 2021 (edited) On 5/7/2021 at 2:43 PM, Just a random person said: No need, it's resolved already. Turns out that "-" doesn't count as a special character Expand Now its going to be negative all day after realizing it isn't special. Edited May 8, 2021 by MechBFP Link to comment Share on other sites More sharing options...
Defenestrator47 Posted May 12, 2021 Share Posted May 12, 2021 This sounds well handled. So glad I took the effort to use exclusive login/password combos everywhere. Pain in the ass but worth it to not get exposed to something like this. Link to comment Share on other sites More sharing options...
HyperDraco Posted May 14, 2021 Share Posted May 14, 2021 On 5/6/2021 at 4:05 PM, Spaceman.Spiff said: but are the jeb plushies there Expand Truly a matter of global concern Link to comment Share on other sites More sharing options...
Ultimate Steve Posted May 19, 2021 Share Posted May 19, 2021 This has brought to my attention that my dad is planning on deleting or soft-deleting his old email address (which I used to buy KSP with) very soon. After this happens I will no longer have the ability to reset my password, so if something like this happens again, I'm screwed. Is there a way to change what email address my KSP store account is associated with? Link to comment Share on other sites More sharing options...
Just a random person Posted May 20, 2021 Share Posted May 20, 2021 On 5/19/2021 at 10:55 PM, Ultimate Steve said: This has brought to my attention that my dad is planning on deleting or soft-deleting his old email address (which I used to buy KSP with) very soon. After this happens I will no longer have the ability to reset my password, so if something like this happens again, I'm screwed. Is there a way to change what email address my KSP store account is associated with? Expand Yes, it is possible. There's an "edit account info" thing when you are logged in iirc Link to comment Share on other sites More sharing options...
Recommended Posts